The most valuable feature of ArcSight Intelligence is a single console where the entire dashboard gives all the connected details in a single place. Using ArcSight Intelligence, all the log sources we get from various sources can be integrated.

One of the most valuable features of ArcSight Intelligence is its ease of use. This is not just one functionality; multiple aspects contribute to it. For instance, it's easy to write rules, and as you do so, the rules get populated automatically, making it simple to understand the commands.

We found the correlation engine to be very good. It takes logs from different types of devices and does the correlation in a good way.

The ability to tailor an environment to suit your specific use cases is a major advantage of ArcSight compared to other logging servers such as Splunk. This capability allows us to customize the alerts we receive based on our environment, such as an airport or banking setting. For example, we can configure alerts to be triggered when someone attempts to access a restricted area or forcefully enter a room. This type of customization is not readily available on other logging servers, making ArcSight an ideal choice for businesses and organizations with specialized needs.

The product has a valuable interface. It provides easy access and can present all the analyses in a single report. Another key advantage is compartmentalization in terms of ease of understanding.